critical9.8
CVE-2020-8986
lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an attacker to gain admini…
Impact
lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an attacker to gain administrative access with a large number of requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zend | Zendto | Versions 3.10, 3.11, 3.12, 3.13, 3.20, 3.51 |